Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32332d3233203d3e20323132323338.roa
File: 3231332e3133392e38302e302f32332d3233203d3e20323132323338.roa (raw, json)
Hash identifier: ZNjrFSSAUaxE5yK8UJ+jLe6cD4tj8pp1G3YVNaM9Rms=
Subject key identifier: 88:95:C9:E3:72:67:EB:B2:0A:D4:68:98:BB:BF:90:4D:BD:23:AD:16
Certificate issuer: /CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Certificate serial: 18595FB707C270CF28D24EB69123E0942089C48A
Authority key identifier: B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32332d3233203d3e20323132323338.roa
Signing time: Tue 30 Jul 2024 08:01:39 +0000
ROA not before: Tue 30 Jul 2024 07:56:39 +0000
ROA not after: Tue 29 Jul 2025 08:01:39 +0000
asID: 212238
IP address blocks: 213.139.80.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 30 Aug 2024 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:59:5f:b7:07:c2:70:cf:28:d2:4e:b6:91:23:e0:94:20:89:c4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b683f2eb50c5999a77456e8826831609d48c7d3e
Validity
Not Before: Jul 30 07:56:39 2024 GMT
Not After : Jul 29 08:01:39 2025 GMT
Subject: CN=8895C9E37267EBB20AD46898BBBF904DBD23AD16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:b0:8c:8e:01:01:82:5e:e2:77:19:06:13:
5c:ed:49:58:c4:2d:54:97:34:b4:8b:ab:4e:55:5d:
83:25:f1:7e:db:9f:0f:15:f8:83:a8:83:f0:83:2e:
a1:fd:be:cf:8f:0d:98:0f:b9:d3:ad:a0:3a:2b:3b:
b7:53:e4:9e:07:dc:6d:ee:d5:18:0b:2f:d9:d0:3b:
25:7f:93:03:6b:85:5c:e4:dc:9c:43:4c:53:35:74:
f8:1e:fe:9b:1c:4c:2e:c5:d9:d7:78:19:fc:5a:aa:
88:aa:f3:a1:5b:01:5b:7d:61:8c:f9:bd:06:8d:cc:
be:20:06:b6:f1:a2:4c:6d:a8:88:16:78:f8:7f:16:
fa:66:1a:a9:55:9a:13:59:b0:d0:c4:87:28:74:cf:
24:fe:e5:e8:2f:91:94:af:27:70:ee:25:8c:b8:63:
b0:67:0b:10:bc:74:46:6b:63:92:94:eb:f5:54:ee:
af:ab:33:87:55:48:8e:c3:fc:50:0a:b8:21:fa:f5:
5d:bb:73:5e:5c:cf:47:c3:b3:0f:f0:1d:dd:69:35:
78:c3:fd:43:85:17:de:ea:15:58:47:33:be:db:03:
93:65:b9:44:97:d3:0a:23:ee:63:83:df:84:68:45:
53:06:3b:a3:8c:fa:40:eb:09:02:49:2f:13:7a:da:
ee:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:95:C9:E3:72:67:EB:B2:0A:D4:68:98:BB:BF:90:4D:BD:23:AD:16
X509v3 Authority Key Identifier:
keyid:B6:83:F2:EB:50:C5:99:9A:77:45:6E:88:26:83:16:09:D4:8C:7D:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/B683F2EB50C5999A77456E8826831609D48C7D3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toPy61DFmZp3RW6IJoMWCdSMfT4.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/a01c14fb-b660-489d-9e9f-9402e9e2c2e2/0/3231332e3133392e38302e302f32332d3233203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.80.0/23
Signature Algorithm: sha256WithRSAEncryption
85:f0:0f:10:23:6e:a6:10:9b:62:c8:d1:f7:6d:c4:7c:30:10:
c3:13:df:7e:f8:69:46:a4:58:c6:c2:92:6d:21:9f:7f:bd:8a:
7b:32:7d:0d:b1:4b:bc:c5:3d:da:f8:2f:fe:65:40:04:61:2c:
e3:db:30:e9:3d:26:5c:b6:4c:ef:bc:42:da:ce:fc:dc:a4:d2:
87:49:82:4b:af:b3:6b:f1:a9:82:d3:1a:bc:2e:8f:67:ff:49:
9a:d5:c3:b3:fa:c5:c4:64:cb:fa:d5:2b:34:8d:79:4a:75:7d:
b2:fc:de:4a:67:d8:c0:e7:f0:b5:d7:c9:d0:45:6a:7c:98:a8:
4a:18:45:a0:88:5b:ac:04:18:40:f5:e2:f9:0e:fd:60:d2:8f:
24:2f:9c:ed:a8:fd:d3:68:c6:c2:b2:a6:99:27:fd:9d:7d:d3:
c9:ba:83:04:8f:08:9f:be:3c:35:a0:18:6f:f3:e5:3c:70:f7:
be:89:35:de:f8:6f:33:c7:ba:bf:a2:6e:1e:19:d2:c7:60:38:
0e:2c:2b:6e:6e:3c:35:c1:52:60:39:28:e4:f2:52:f0:ee:91:
f8:72:c8:f7:a2:d6:f0:0d:f0:c3:34:90:30:b7:b7:a2:da:59:
f0:39:d1:8d:d5:0f:a6:5d:7c:7e:ac:ea:56:ba:39:a6:25:5e:
b7:98:4a:0d
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 30 01:42:28 2024 by rpki-client on console-ams.rpki-client.org